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application: 



Listing of Claims : 

1 . (Withdrawn) A tamper-resistant processing method comprising the steps 

of: 

(1) storing a secret key index x corresponding to a public key ofRSA (e, N; 
modulus N being a product of 2 primes p and q) in a storage device; 

(2) inputting a ciphertext Y through an input means; 

(3) calculating yp, a remainder of y, based on a modulus of either P or its 
multiple and yq, a remainder of y, based on a modulus of either Q or its multiple; and 

(4) when calculating Cp which is a remainder of yp A xp based on a modulus of 
either of p or its multiple and calculating Cq which is a remainder of yq A xq based on 
a modulus of either q or its multiple, where a remainder of x based on a modulus of 
either of p-1 or its multiple is put as xp, and a remainder of x based on a modulus of 
either q-1 or its multiple is put as xq, 

(4a) deciding which process (4b) or (4c) is to be executed for each processing 
of a bit block which is a bit string of at least 1 bit composing xp, xq; 

(4b) executing a predetermined modular exponentiation calculation on said bit 
block to be processed by xp and for storing the calculation result in the storage 
device; 
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(4c) executing a predetermined modular exponentiation calculation on said bit 
block to be processed by xq and for storing the calculation result in the storage 
device; 

(5) calculating RSA decryption calculation, y*x mod N based on a difference 
between Cp and Cq, when the calculation of Cp about the whole of xp, and the 
calculation of Cq about the whole of xq are finished; and 

(6) outputting the result of said RSA decryption calculation. 

2. (Withdrawn) A tamper-resistant processing method of claim 1 wherein for 
said yp, yq, xp and xq, calculation be made as: yp = y mod p, yq = y mod q, xp = x 
mod (p-1 ), xq ~ x mod (q-1 ). 

3. (Withdrawn) A tamper-resistant processing method of claim 1 wherein 
which one of said steps (4b) and (4c) is to be processed is determined with the use 
of a generated random number 

4. (Withdrawn) A tamper-resistant processing method of claim 1 wherein the 
process of said step (4a) is applied to a part of bit patterns of said xp or xq, and for a 
remaining part of the bit patterns, after said either one of step (4b) or (4c) is 
processed, another one is processed. 
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5. (Currently amended) A tamper-resistant processing method comprising the 
steps of: 

(a) deciding which step is to be selected out of the following steps (b) and (c) 
for each processing of one operation unit; 

(b) after transferring one operation unit in the bit pattern of data A in a 
memory in order of 4ts-bit-bit_sequence of said data A t o a first register R1 , 
transferring one operation unit in the bit pattern of data B in the memory in order of 
ite-tett-bit sequence of said data B t o a second register R2; 

(c) after transferring one operation unit in the bit pattern of said data B in order 
of jte-bft-bit sequence of said data B to said second register R2, transferring one 
operation unit in the bit pattern in said data A in order of 4ts4wt-bjtsequence of said 
data A t o said first register R1 ; 

(d) executing a predetermined arithmetic operation on the contents of said 
first register R1 and the contents of said second register R2; 

(e) storing the result of said arithmetic operation in the memory, 

(f) repeating the steps from (a) through (e) until said arithmetic operation for 
said data A and said data B is finished. 

6. (Currently amended) A tamper-resistant processing method comprising the 
steps of: 

(a) deciding which step is to be selected out of the following steps (b) and (c) 
for each processing of one operation unit; 
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(b) after transferring one operation unit of data A in a memory in order of its-bit 
^sequence of said data A t o a first register R1 , transferring one operation unit of 
data B in the memory in order of tts-fefc-bitsequence of said datg B to a second 
register R2; 

(c) after transferring said one operation unit of the data A in order of tts-bit-bjt 
sequence of said data A t o said second register R2, transferring said one operation 
unit of the data B in order of tts-ett-bjtsequence ofgajd data B to said first register 
R1; 

(d) executing a predetermined arithmetic operation on the contents of said 
first register R1 and on the contents of said second register R2; 

(e) storing the result of said arithmetic operation in the memory; 

(f) repeating the steps from (a) through (e) until said arithmetic operation on 
said data A and said data B is finished. 

7. (Previously presented) A tamper-resistant processing method of claim 6 
wherein which one out of said steps (b) and (c) is to be processed is determined with 
the use of a generated random number. 

8. (Original) A tamper-resistant processing method of claim 6 wherein said 
predetermined arithmetic operation is the operation for an arithmetic sum. 
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9. (Original) A tamper-resistant processing method of claim 6 wherein said 
predetermined arithmetic operation is the operation for an arithmetic product. 

10. (Original) A tamper-resistant processing method of claim 6 wherein said 
predetermined arithmetic operation is any one of the logical sum OR, logical product 
AND, and exclusive logical sum EXOR. 

1 1 . (Currently amended) A tamper-resistant processing method comprising 
the steps of: 

(a) randomly selecting any one of unprocessed one operation unit in a bit 
pattern of data A in a memory; 

(b) transferring said one operation unit of said data A selected to a first 

register R1 ; 

(c) transferring one operation unit in a bit pattern of data B In the memory 
corresponding to said one operation unit of said data A selected to a second register 
R2; 

(d) executing a predetermined arithmetic operation for the contents of said 
first register R1 and the contents of said second resister R2; 

(e) storing a result of said arithmetic operation in the memory; 

(f) repeating the steps from f*Ha}_through {©)£e} until said arithmetic 
operation is finished on said data A and said data R wherein neither said data A nor 
said data B are randomly arranged bits . 
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1 2. (Original) A tamper-resistant processing method of claim 1 1 wherein 
corresponding to a generated random number, said unprocessed one operation unit 
is selected. 

13. (Original) A tamper-resistant processing method of claim 1 1 wherein said 
predetermined arithmetic operation is any one of logical sum OR, logical product 
AND, and exclusive logical sum EXOR. 
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